[sr-dev] out of memory crash 5.0.2

David Escartín descartin at bts.io
Wed Oct 4 18:06:11 CEST 2017


hello all

today we experience an issue in a kamailio when we saw some issue trying 
to free a sip transaction it seems

Oct  4 09:28:35 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174859]: : 
<core> [core/mem/q_malloc.c:469]: qm_free(): BUG: qm_free: bad pointer 
0x3463636562393730 (out of memory block!) called from tm: h_table.c: 
free_cell_helper(187) - aborting
Oct  4 09:28:36 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174879]: 
CRITICAL: <core> [core/pass_fd.c:277]: receive_fd(): EOF on 37
Oct  4 09:28:36 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174832]: 
ALERT: <core> [main.c:743]: handle_sigs(): child process 174859 exited 
by a signal 6
Oct  4 09:28:36 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174832]: 
ALERT: <core> [main.c:746]: handle_sigs(): core was generated
Oct  4 09:28:36 tyo-proxy2 /usr/local/kamailio/sbin/kamailio[174832]: 
INFO: <core> [main.c:768]: handle_sigs(): terminating due to SIGCHLD

here you have the backtrace of the core

(gdb)
#0  0x00007fb7cfe461d7 in raise () from /lib64/libc.so.6
#1  0x00007fb7cfe478c8 in abort () from /lib64/libc.so.6
#2  0x0000000000660056 in qm_free (qmp=0x7fb709b42000, 
p=0x3863316638663636, file=0x7fb7ce044dd6 "tm: h_table.c", 
func=0x7fb7ce045080 <__FUNCTION__.10977> "free_cell_helper", line=187, 
mname=0x7fb7ce0447d0 "tm")
     at core/mem/q_malloc.c:471
#3  0x00007fb7cdf74529 in free_cell_helper (dead_cell=0x7fb7abe40eb0, 
silent=0, fname=0x7fb7ce0627e0 "timer.c", fline=651) at h_table.c:187
#4  0x00007fb7cdfff369 in wait_handler (ti=995094357, 
wait_tl=0x7fb7abe40f30, data=0x7fb7abe40eb0) at timer.c:651
#5  0x00000000004b0b15 in timer_list_expire (t=995094357, 
h=0x7fb709bc0c58, slow_l=0x7fb709bc3ae0, slow_mark=26309) at 
core/timer.c:874
#6  0x00000000004b0f79 in timer_handler () at core/timer.c:939
#7  0x00000000004b1419 in timer_main () at core/timer.c:978
#8  0x0000000000423234 in main_loop () at main.c:1697
#9  0x0000000000429dcd in main (argc=13, argv=0x7ffed3d33788) at main.c:2646
(gdb) bt ful
#0  0x00007fb7cfe461d7 in raise () from /lib64/libc.so.6
No symbol table info available.
#1  0x00007fb7cfe478c8 in abort () from /lib64/libc.so.6
No symbol table info available.
#2  0x0000000000660056 in qm_free (qmp=0x7fb709b42000, 
p=0x3863316638663636, file=0x7fb7ce044dd6 "tm: h_table.c", 
func=0x7fb7ce045080 <__FUNCTION__.10977> "free_cell_helper", line=187, 
mname=0x7fb7ce0447d0 "tm")
     at core/mem/q_malloc.c:471
         qm = 0x7fb709b42000
         f = 0x7fb71f11eba8
         size = 552
         next = 0x7ffed3d330f0
         prev = 0x7fb7ce024c51 <run_trans_callbacks+124>
         __FUNCTION__ = "qm_free"
#3  0x00007fb7cdf74529 in free_cell_helper (dead_cell=0x7fb7abe40eb0, 
silent=0, fname=0x7fb7ce0627e0 "timer.c", fline=651) at h_table.c:187
         b = 0x0
         i = 1
         rpl = 0x7fb7cf193ef0
         tt = 0x7ffed3d331f0
         foo = 0x100000000
         cbs = 0x0
         cbs_tmp = 0x7fb70a4f62f0
         __FUNCTION__ = "free_cell_helper"
#4  0x00007fb7cdfff369 in wait_handler (ti=995094357, 
wait_tl=0x7fb7abe40f30, data=0x7fb7abe40eb0) at timer.c:651
         p_cell = 0x7fb7abe40eb0
         ret = 0
#5  0x00000000004b0b15 in timer_list_expire (t=995094357, 
h=0x7fb709bc0c58, slow_l=0x7fb709bc3ae0, slow_mark=26309) at 
core/timer.c:874
         tl = 0x7fb7abe40f30
         ret = 0
#6  0x00000000004b0f79 in timer_handler () at core/timer.c:939
         saved_ticks = 995094357
         run_slow_timer = 0
         i = 709
         __FUNCTION__ = "timer_handler"
#7  0x00000000004b1419 in timer_main () at core/timer.c:978
No locals.
#8  0x0000000000423234 in main_loop () at main.c:1697
         i = 8
         pid = 0
         si = 0x0
         si_desc = "udp receiver child=7 
sock=87.237.82.76:5060\000\267\177\000\000\360\063\323\323\376\177\000\000\341\304e\000\000\000\000\000 at yA\000\000\000\000\000ȶ\267\t\267\177\000\000\000\000\000\000\000\000\000\000\340\020\025Ϸ\177\000\000 at 4\323\323\376\177\000\000\017\213f\000\000\000\000\000\260Ju\000\000\000\000\000UF\356_o\000\000"
         nrprocs = 8
         woneinit = 1
         __FUNCTION__ = "main_loop"
#9  0x0000000000429dcd in main (argc=13, argv=0x7ffed3d33788) at main.c:2646
         cfg_stream = 0xdae010
         c = -1
         r = 0
         tmp = 0x7ffed3d34f25 ""
         tmp_len = 0
         port = 0
         proto = 0
         options = 0x734958 
":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:"
         ret = -1
         seed = 3992879128
         rfd = 4
         debug_save = 0
         debug_flag = 0
         dont_fork_cnt = 0
         n_lst = 0x7ffed3d33640
---Type <return> to continue, or q <return> to quit---
         p = 0x7fb7cfeb18bd <intel_check_word+173> 
"H\205\300t\025\017\266P\003\017\266\312D9\371\017\204", <incomplete 
sequence \316>
         st = {st_dev = 19, st_ino = 33728, st_nlink = 2, st_mode = 
16832, st_uid = 1001, st_gid = 1001, __pad0 = 0, st_rdev = 0, st_size = 
300, st_blksize = 4096, st_blocks = 0, st_atim = {tv_sec = 1502352827,
             tv_nsec = 921620311}, st_mtim = {tv_sec = 1505400353, 
tv_nsec = 950483654}, st_ctim = {tv_sec = 1505400396, tv_nsec = 
678439390}, __unused = {0, 0, 0}}
         __FUNCTION__ = "main"
(gdb) frame 4
#4  0x00007fb7cdfff369 in wait_handler (ti=995094357, 
wait_tl=0x7fb7abe40f30, data=0x7fb7abe40eb0) at timer.c:651
651        UNREF_FREE(p_cell);
(gdb) p *p_cell
$25 = {next_c = 0x0, prev_c = 0x0, hash_index = 2893, label = 
1369668607, flags = 4132, nr_of_outgoings = 2, ref_count = {val = 0}, 
from = {
     s = 0x7fb71863203b "From: 
<sip:+8801884038854 at 125.22.112.12;user=phone>;tag=59D4A891-3602563D-AC1C5C0E\r\nTo: 
\"+971569252742\" 
<sip:+971569252742 at 87.237.82.72;user=phone>;tag=caK9N5Na0HNXH\r\nCall-ID: 
aef5eaee-a8e5-11e7-9764-"..., len = 84}, callid = {
     s = 0x7fb7186320e2 "Call-ID: 
aef5eaee-a8e5-11e7-9764-b96367f6cc42\r\nCSeq: 1 BYE\r\nSupported: 
timer\r\nMax-Forwards: 68\r\nReason: Q.850 ;cause=16 ;text=\"Normal call 
clearing\"\r\nContent-Length: 0\r\nRoute: <sip:87.237.82.72;lr=on;"..., 
len = 47}, cseq_n = {
     s = 0x7fb718632111 "CSeq: 1 BYE\r\nSupported: 
timer\r\nMax-Forwards: 68\r\nReason: Q.850 ;cause=16 ;text=\"Normal call 
clearing\"\r\nContent-Length: 0\r\nRoute: 
<sip:87.237.82.72;lr=on;ftag=caK9N5Na0HNXH;did=61b.969a>\r\n\r\n", len = 
7}, to = {
     s = 0x7fb71863208f "To: \"+971569252742\" 
<sip:+971569252742 at 87.237.82.72;user=phone>;tag=caK9N5Na0HNXH\r\nCall-ID: 
aef5eaee-a8e5-11e7-9764-b96367f6cc42\r\nCSeq: 1 BYE\r\nSupported: 
timer\r\nMax-Forwards: 68\r\nReason: Q.850 ;cause="..., len = 83}, 
method = {
     s = 0x7fb718631fb8 "BYE sip:971569252742 at 87.237.83.72:5080 
SIP/2.0\r\nVia: SIP/2.0/UDP 
125.22.112.12:5060;branch=z9hG4bKhvkkq0202gqhhk4sl041sd0000g00.1\r\nFrom: 
<sip:+8801884038854 at 125.22.112.12;user=phone>;tag=59D4A891-3602"..., len 
= 3}, tmcb_hl = {first = 0x7fb734f46910, reg_types = 131714}, wait_timer 
= {next = 0x0, prev = 0x0, expire = 995094345, initial_timeout = 80, 
data = 0x7fb7abe40eb0, f = 0x7fb7cdfff2b6 <wait_handler>, flags = 513,
     slow_idx = 0}, uas = {request = 0x7fb7186318c8, end_request = 
0x7fb7186329b8 "\300\300\300\300", response = {activ_type = 481, flags = 
128, t_active = 0 '\000', branch = 0, buffer_len = 517,
       buffer = 0x7fb7647fab88 "SIP/2.0 481 Call Does Not Exist\r\nVia: 
SIP/2.0/UDP 
125.22.112.12:5060;branch=z9hG4bKhvkkq0202gqhhk4sl041sd0000g00.1\r\nFrom: 
<sip:+8801884038854 at 125.22.112.12;user=phone>;tag=59D4A891-3602563D-AC1C5C0E\r\n"..., 
my_T = 0x7fb7abe40eb0, timer = {next = 0x0, prev = 0x0, expire = 0, 
initial_timeout = 0, data = 0x0, f = 0x7fb7cdffed8a <retr_buf_handler>, 
flags = 0, slow_idx = 0}, dst = {send_sock = 0x7fb7cee66788, to = {s = {
             sa_family = 2, sa_data = 
"\023\304}\026p\f\000\000\000\000\000\000\000"}, sin = {sin_family = 2, 
sin_port = 50195, sin_addr = {s_addr = 208672381}, sin_zero = 
"\000\000\000\000\000\000\000"}, sin6 = {sin6_family = 2,
             sin6_port = 50195, sin6_flowinfo = 208672381, sin6_addr = 
{__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 
0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}}, id 
= 0,
         proto = 1 '\001', send_flags = {f = 0 '\000', blst_imask = 0 
'\000'}}, retr_expire = 0, fr_expire = 0}, local_totag = {s = 0x0, len = 
0}, cancel_reas = 0x0, status = 481}, uac = 0x7fb7abe410b8, async_backup = {
     backup_route = 1, backup_branch = 4294967295, blind_uac = 0, 
ruri_new = 1}, fwded_totags = 0x0, uri_avps_from = 0x0, uri_avps_to = 
0x0, user_avps_from = 0x0, user_avps_to = 0x0, domain_avps_from = 0x0, 
domain_avps_to = 0x0,
   xavps_list = 0x0, reply_mutex = {val = 0}, reply_locker_pid = {val = 
0}, reply_rec_lock_level = 0, fr_timeout = 480, fr_inv_timeout = 1920, 
rt_t1_timeout_ms = 650, rt_t2_timeout_ms = 4000, end_of_life = 995094709,
   relayed_reply_branch = 1, on_failure = 0, on_branch_failure = 0, 
on_reply = 0, on_branch = 0, on_branch_delayed = 0, md5 = 0x7fb7abe41098 
"adfe93b19dfeb65381f6a9144bf1b0e9"}
(gdb) frame 3
#3  0x00007fb7cdf74529 in free_cell_helper (dead_cell=0x7fb7abe40eb0, 
silent=0, fname=0x7fb7ce0627e0 "timer.c", fline=651) at h_table.c:187
187                sip_msg_free_unsafe(rpl);
(gdb) p *rpl
$26 = {id = 793790803, pid = 540028466, tval = {tv_sec = 
8462656578208149556, tv_usec = 7308613580334855013}, fwd_send_flags = {f 
= 111 'o', blst_imask = 117 'u'}, rpl_send_flags = {f = 116 't', 
blst_imask = 13 '\r'},
   first_line = {type = 8250, flags = 18771, len = 775040848, u = 
{request = {method = {s = 0x3738205044552f30 <Address 0x3738205044552f30 
out of bounds>, len = 926102062}, uri = {
           s = 0x636e6172623b3237 <Address 0x636e6172623b3237 out of 
bounds>, len = 964312424}, version = {s = 0x39332e636338654b <Address 
0x39332e636338654b out of bounds>, len = 1664496945}, method_value = 
878863157}, reply = {
         version = {s = 0x3738205044552f30 <Address 0x3738205044552f30 
out of bounds>, len = 926102062}, status = {s = 0x636e6172623b3237 
<Address 0x636e6172623b3237 out of bounds>, len = 964312424}, reason = {
           s = 0x39332e636338654b <Address 0x39332e636338654b out of 
bounds>, len = 1664496945}, statuscode = 878863157}}}, via1 = 
0x3364636462323865, via2 = 0x302e353838623234, headers = 
0x53203a6169560a0d,
   last_header = 0x552f302e322f5049, parsed_flag = 3689061859469578308, 
h_via1 = 0x3b32372e32382e37, h_via2 = 0x7a3d68636e617262, callid = 
0x38654b6234476839, to = 0x37393663352e6363, cseq = 0x6535613738373339,
   from = 0x6336666237316130, contact = 0x3231353933353432, maxforwards 
= 0x560a0d302e366232, route = 0x2f504953203a6169, record_route = 
0x205044552f302e32, content_type = 0x382e3733322e3738, content_length = 
0x6172623b32372e32,
   authorization = 0x4768397a3d68636e, expires = 0x2e636338654b6234, 
proxy_auth = 0x3465633231636336, supported = 0x3230623761643335, require 
= 0x3566356130333333, proxy_require = 0x3864303335346234,
   unsupported = 0x3a6169560a0d302e, allow = 0x302e322f50495320, event = 
0x2e3738205044552f, accept = 0x372e32382e373332, accept_language = 
0x68636e6172623b32, organization = 0x4b62344768397a3d, priority = 
0x3565612e63633865,
   subject = 0x6461316136346538, user_agent = 0x3239643035353036, server 
= 0x6562653237353264, content_disposition = 0xd302e3866616138, diversion 
= 0x4953203a6169560a, rpid = 0x44552f302e322f50, refer_to = 
0x3733322e37382050,
   session_expires = 0x623b32372e32382e, min_se = 0x397a3d68636e6172, 
sipifmatch = 0x6338654b62344768, subscription_state = 
0x6332626363392e63, date = 0x6339613134333566, identity = 
0x3936353363343934,
   identity_info = 0x6338383864636536, pai = 0x69560a0d302e3639, ppi = 
0x322f504953203a61, path = 0x38205044552f302e, privacy = 
0x32382e3733322e37, min_expires = 0x6e6172623b32372e, body = 
0x344768397a3d6863,
   eoh = 0x632e636338654b62 <Address 0x632e636338654b62 out of bounds>, 
unparsed = 0x3339316133646337 <Address 0x3339316133646337 out of 
bounds>, rcv = {src_ip = {af = 1630613603, len = 959854384, u = {addrl = {
           3977350488200209462, 3329677872489128505}, addr32 = 
{879125558, 926049074, 909206073, 775251042}, addr16 = {25654, 13414, 
25394, 14130, 25145, 13873, 25698, 11829}, addr = "6df42c279b16bd5."}}, 
dst_ip = {
       af = 1443499312, len = 540696937, u = {addrl = 
{3400268511741757779, 3615888265024914517}, addr32 = {793790803, 
791686706, 542131285, 841889592}, addr16 = {18771, 12112, 11826, 12080, 
17493, 8272, 14136, 12846},
         addr = "SIP/2.0/UDP 87.2"}}, src_port = 14131, dst_port = 
14382, proto_reserved1 = 842477106, proto_reserved2 = 1634886203, src_su 
= {s = {sa_family = 25454, sa_data = "h=z9hG4bKe8cc."}, sin = 
{sin_family = 25454,
         sin_port = 15720, sin_addr = {s_addr = 1198012794}, sin_zero = 
"4bKe8cc."}, sin6 = {sin6_family = 25454, sin6_port = 15720, 
sin6_flowinfo = 1198012794, sin6_addr = {__in6_u = {__u6_addr8 = 
"4bKe8cc.13d79438",
             __u6_addr16 = {25140, 25931, 25400, 11875, 13105, 14180, 
13369, 14387}, __u6_addr32 = {1699439156, 778265400, 929313585, 
942879801}}}, sin6_scope_id = 1680879928}}, bind_address = 
0x3239306139373563, proto = 102 'f'},
   buf = 0xa0d302e64376563 <Address 0xa0d302e64376563 out of bounds>, 
len = 979462486, new_uri = {s = 0x5044552f302e322f <Address 
0x5044552f302e322f out of bounds>, len = 775370784}, dst_uri = {
     s = 0x72623b32372e3238 <Address 0x72623b32372e3238 out of bounds>, 
len = 1751346785}, parsed_uri_ok = 1264727111, parsed_uri = {user = {s = 
0x613161333937642e <Address 0x613161333937642e out of bounds>, len = 
943219557},
     passwd = {s = 0x6164643739663937 <Address 0x6164643739663937 out of 
bounds>, len = 828455217}, host = {s = 0x6169560a0d302e66 <Address 
0x6169560a0d302e66 out of bounds>, len = 1230184506}, port = {
       s = 0x3738205044552f30 <Address 0x3738205044552f30 out of 
bounds>, len = 926102062}, params = {s = 0x636e6172623b3237 <Address 
0x636e6172623b3237 out of bounds>, len = 964312424}, sip_params = {
       s = 0x63622e636338654b <Address 0x63622e636338654b out of 
bounds>, len = 808609078}, headers = {s = 0x6432346339396636 <Address 
0x6432346339396636 out of bounds>, len = 845296434}, port_no = 12643, 
proto = 12646,
     type = 808346165, flags = (URI_USER_NORMALIZE | unknown: 
1767246348), transport = {s = 0x552f302e322f5049 <Address 
0x552f302e322f5049 out of bounds>, len = 941641796}, ttl = {
       s = 0x3b32372e32382e37 <Address 0x3b32372e32382e37 out of 
bounds>, len = 1851880034}, user_param = {s = 0x38654b6234476839 
<Address 0x38654b6234476839 out of bounds>, len = 959341411}, maddr = {
       s = 0x6432663738626633 <Address 0x6432663738626633 out of 
bounds>, len = 845296945}, method = {s = 0x6530396537303332 <Address 
0x6530396537303332 out of bounds>, len = 775239991}, lr = {
       s = 0x2f504953203a6169 <Address 0x2f504953203a6169 out of 
bounds>, len = 791686706}, r2 = {s = 0x382e3733322e3738 <Address 
0x382e3733322e3738 out of bounds>, len = 842477106}, gr = {
       s = 0x4768397a3d68636e <Address 0x4768397a3d68636e out of 
bounds>, len = 1699439156}, transport_val = {s = 0x3037313336323438 
<Address 0x3037313336323438 out of bounds>, len = 912406072}, ttl_val = {
       s = 0x6466616633366533 <Address 0x6466616633366533 out of 
bounds>, len = 942695731}, user_param_val = {s = 0x3a6169560a0d302e 
<Address 0x3a6169560a0d302e out of bounds>, len = 1346982688}, maddr_val = {
       s = 0x2e3738205044552f <Address 0x2e3738205044552f out of 
bounds>, len = 775369522}, method_val = {s = 0x68636e6172623b32 <Address 
0x68636e6172623b32 out of bounds>, len = 1748597309}, lr_val = {
       s = 0x6532622e63633865 <Address 0x6532622e63633865 out of 
bounds>, len = 892560439}, r2_val = {s = 0x3462613963313564 <Address 
0x3462613963313564 out of bounds>, len = 842491188}, gr_val = {
       s = 0xd302e3332393430 <Address 0xd302e3332393430 out of bounds>, 
len = 1634293258}}, parsed_orig_ruri_ok = 775040848, parsed_orig_ruri = 
{user = {s = 0x3733322e37382050 <Address 0x3733322e37382050 out of bounds>,
       len = 775043118}, passwd = {s = 0x397a3d68636e6172 <Address 
0x397a3d68636e6172 out of bounds>, len = 1647593320}, host = {s = 
0x3036306533392e63 <Address 0x3036306533392e63 out of bounds>, len = 
808739637}, port = {
       s = 0x6430303434316430 <Address 0x6430303434316430 out of 
bounds>, len = 962998329}, params = {s = 0x69560a0d302e3732 <Address 
0x69560a0d302e3732 out of bounds>, len = 1394621025}, sip_params = {
       s = 0x38205044552f302e <Address 0x38205044552f302e out of 
bounds>, len = 858926647}, headers = {s = 0x6e6172623b32372e <Address 
0x6e6172623b32372e out of bounds>, len = 2050844771}, port_no = 19298, 
proto = 14437,
     type = 909009763, flags = (unknown: 878850356), transport = {s = 
0x3737663362366332 <Address 0x3737663362366332 out of bounds>, len = 
811689014}, ttl = {s = 0x2e32646465633366 <Address 0x2e32646465633366 
out of bounds>,
       len = 1443499312}, user_param = {s = 0x2f302e322f504953 <Address 
0x2f302e322f504953 out of bounds>, len = 542131285}, maddr = {s = 
0x32372e32382e3733 <Address 0x32372e32382e3733 out of bounds>, len = 
1634886203}, method = {
       s = 0x654b62344768397a <Address 0x654b62344768397a out of 
bounds>, len = 778265400}, lr = {s = 0x3463643430313264 <Address 
0x3463643430313264 out of bounds>, len = 1684156466}, r2 = {
       s = 0x6139313961373064 <Address 0x6139313961373064 out of 
bounds>, len = 809002294}, gr = {s = 0x504953203a616956 <Address 
0x504953203a616956 out of bounds>, len = 808333871}, transport_val = {
       s = 0x2e3733322e373820 <Address 0x2e3733322e373820 out of 
bounds>, len = 925774392}, ttl_val = {s = 0x68397a3d68636e61 <Address 
0x68397a3d68636e61 out of bounds>, len = 1264727111}, user_param_val = {
       s = 0x336239313030662e <Address 0x336239313030662e out of 
bounds>, len = 1714436451}, maddr_val = {s = 0x3639343462666465 <Address 
0x3639343462666465 out of bounds>, len = 1647731768}, method_val = {
       s = 0x6169560a0d302e65 <Address 0x6169560a0d302e65 out of 
bounds>, len = 1230184506}, lr_val = {s = 0x3738205044552f30 <Address 
0x3738205044552f30 out of bounds>, len = 926102062}, r2_val = {
       s = 0x636e6172623b3237 <Address 0x636e6172623b3237 out of 
bounds>, len = 964312424}, gr_val = {s = 0x32342e636338654b <Address 
0x32342e636338654b out of bounds>, len = 1681404473}}, add_rm = 
0x3863316638663636,
   body_lumps = 0x3633623765633361, reply_lump = 0x302e326136636130, 
add_to_branch_s = "\r\nVia: SIP/2.0/UDP 
87.237.82.72;branch=z9hG4bKe8cc.f34debd", add_to_branch_len = 909522273, 
hash_index = 1664628533, msg_flags = 959656752,
   flags = 1680947555, set_global_address = {s = 0x560a0d302e646164 
<Address 0x560a0d302e646164 out of bounds>, len = 540696937}, 
set_global_port = {s = 0x205044552f302e32 <Address 0x205044552f302e32 
out of bounds>,
     len = 841889592}, force_send_socket = 0x6172623b32372e32, path_vec 
= {s = 0x4768397a3d68636e <Address 0x4768397a3d68636e out of bounds>, 
len = 1699439156}, instance = {
     s = 0x3061653066303834 <Address 0x3061653066303834 out of bounds>, 
len = 962738483}, reg_id = 1714840422, ruid = {s = 0x3762376465303565 
<Address 0x3762376465303565 out of bounds>, len = 168636462}, 
location_ua = {
     s = 0x302e322f50495320 <Address 0x302e322f50495320 out of bounds>, 
len = 1346655535}, ldv = {flow = {decoded = 775369522, rcv = {src_ip = 
{af = 1919040306, len = 1751346785, u = {addrl = {5431961581858159165,
               7233118750862686309}, addr32 = {1748597309, 1264727111, 
1667446885, 1684091694}, addr16 = {31293, 26681, 13383, 19298, 14437, 
25443, 13102, 25697}, addr = "=z9hG4bKe8cc.3ad"}}, dst_ip = {af = 
1681024055,
           len = 1714447409, u = {addrl = {4049126615781303909, 
3544439805141410918}, addr32 = {809068133, 942760756, 959800422, 
825254201}, addr16 = {26213, 12345, 25396, 14385, 25702, 14645, 24889, 
12592},
             addr = "ef904c18fd599a01"}}, src_port = 12855, dst_port = 
14640, proto_reserved1 = 221261363, proto_reserved2 = 1634293258, src_su 
= {s = {sa_family = 8250, sa_data = "SIP/2.0/UDP 87"}, sin = {sin_family 
= 8250,
             sin_port = 18771, sin_addr = {s_addr = 775040848}, sin_zero 
= "0/UDP 87"}, sin6 = {sin6_family = 8250, sin6_port = 18771, 
sin6_flowinfo = 775040848, sin6_addr = {__in6_u = {__u6_addr8 = "0/UDP 
87.237.82.",
                 __u6_addr16 = {12080, 17493, 8272, 14136, 12846, 14131, 
14382, 11826}, __u6_addr32 = {1146433328, 926425168, 926102062, 
775043118}}}, sin6_scope_id = 1648046647}}, bind_address = 
0x397a3d68636e6172,
         proto = 104 'h'}}}}
(gdb) frame 2
#2  0x0000000000660056 in qm_free (qmp=0x7fb709b42000, 
p=0x3863316638663636, file=0x7fb7ce044dd6 "tm: h_table.c", 
func=0x7fb7ce045080 <__FUNCTION__.10977> "free_cell_helper", line=187, 
mname=0x7fb7ce0447d0 "tm")
     at core/mem/q_malloc.c:471
471                abort();
(gdb) frame 1
#1  0x00007fb7cfe478c8 in abort () from /lib64/libc.so.6
(gdb)


could you please check if you find any clue? just some secs before we 
started to receive some requests which caused a loop in our proxy (SIP 
requests to the proxy without To tag and no Route headers)
maybe that could be related consuming the memory ¿?

we are running kamailio 5.0.2

best regards
david



More information about the sr-dev mailing list